Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File:                     caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier:          7gnLTQMi9xr90qZB9UN8J8rUOBXfqMR0MEiLT+mHOsI=
Subject key identifier:   C4:55:A1:FD:16:81:55:9F:12:0E:2A:B4:5B:F3:90:4E:16:0D:59:BA
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer:       /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial:       019F1FB382D267DFF834CB53B61AC88EA64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number:          06E5
Signing time:             Wed 01 Jul 2026 22:01:25 +0000
Manifest this update:     Wed 01 Jul 2026 22:01:25 +0000
Manifest next update:     Thu 02 Jul 2026 22:01:25 +0000
Files and hashes:         1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
                          2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: Wc9jN3zEgkIx6ST7cNyBV8jb2yHrlflcsRavPCEqCl8=)
                          3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
                          4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 22:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1f:b3:82:d2:67:df:f8:34:cb:53:b6:1a:c8:8e:a6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
        Validity
            Not Before: Jul  1 22:01:25 2026 GMT
            Not After : Jul  2 22:01:25 2026 GMT
        Subject: CN=c455a1fd1681559f120e2ab45bf3904e160d59ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:58:ab:0b:0a:91:54:55:1a:3f:89:a2:45:7d:
                    f0:9f:3a:8f:ef:92:04:47:ec:b7:bd:bf:3c:26:ab:
                    8c:71:09:8a:b7:17:36:35:e3:fd:40:58:94:66:61:
                    27:d8:cf:a9:f8:e3:c3:d3:6f:e7:9e:5e:05:0e:79:
                    16:9f:fb:db:50:f0:15:40:b5:05:18:dd:dd:84:6d:
                    2d:20:f5:ae:67:1c:e2:b0:38:b1:1c:2f:5d:17:c4:
                    94:81:fd:8e:36:0d:f4:13:8b:d8:b3:4a:67:50:8c:
                    9d:67:6f:78:cf:c8:d3:e3:59:2e:48:f5:6d:da:45:
                    39:fe:af:f2:e2:b8:3e:08:c6:46:fb:5d:05:5b:96:
                    ef:8f:e2:3d:fb:40:53:10:37:2b:43:93:ae:c8:f2:
                    bc:32:01:73:b0:de:39:4e:42:2f:2d:1a:05:ab:b0:
                    0d:41:f4:21:76:d8:2b:8a:28:6a:7d:cc:96:3a:c6:
                    2b:c7:78:2b:e0:c0:57:db:d3:ee:a4:e5:b7:c0:81:
                    94:f5:5c:24:e7:c0:30:4b:76:81:30:33:b3:29:87:
                    22:7d:b9:0c:8a:c5:8d:06:87:56:dc:7b:0c:b6:1c:
                    06:da:c7:df:2c:f0:1f:a2:eb:04:69:57:fe:c1:f0:
                    65:4b:a1:e7:20:40:1d:82:68:2a:02:8f:09:85:5c:
                    f2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:A1:FD:16:81:55:9F:12:0E:2A:B4:5B:F3:90:4E:16:0D:59:BA
            X509v3 Authority Key Identifier:
                keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:94:87:e9:96:65:1a:f8:fe:13:e8:82:32:ac:61:1f:ba:e9:
         33:de:ed:c2:e6:ee:ef:2e:cb:14:8d:ca:96:1c:72:74:78:76:
         b9:d2:97:5f:34:65:49:89:08:73:31:20:b1:eb:f3:4a:bc:d2:
         0a:ad:89:1e:7d:53:4d:79:ec:be:e7:e0:54:9d:0b:dc:55:05:
         55:e8:8f:b6:76:b9:36:2c:b6:97:f9:24:e4:ef:d5:5a:78:55:
         19:cf:c5:1d:00:6b:56:8f:0f:9a:77:cf:3d:d9:dd:41:1c:8c:
         9d:00:bf:2a:ff:4f:1a:c3:33:6c:2e:4f:ac:d7:ca:2b:b5:f7:
         dc:c4:b5:cb:ef:23:6e:7c:5f:19:06:94:78:c7:b4:a2:bf:de:
         c9:bb:86:8f:6e:fa:4b:04:e7:ee:1a:8b:b5:0b:7f:55:a2:ef:
         13:3a:b6:36:f2:f9:e4:5d:4d:d2:15:5c:bf:00:76:52:1c:6c:
         1a:e6:ff:ba:9a:a7:6c:a0:54:13:15:54:42:43:14:75:8d:22:
         e3:1b:90:b0:7a:c5:cc:5a:9e:28:74:2c:d1:11:09:82:a3:ba:
         48:22:2c:ad:c6:64:68:e8:3c:65:5f:ca:46:a4:5a:88:5f:1f:
         fb:e4:6f:80:87:87:4b:36:5e:9a:15:09:d2:20:30:62:ce:be:
         fb:21:dc:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8fs4LSZ9/4NMtTthrIjqZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm
MjhmNmMwHhcNMjYwNzAxMjIwMTI1WhcNMjYwNzAyMjIwMTI1WjAzMTEwLwYDVQQD
EyhjNDU1YTFmZDE2ODE1NTlmMTIwZTJhYjQ1YmYzOTA0ZTE2MGQ1OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VirCwqRVFUaP4miRX3wnzqP75IE
R+y3vb88JquMcQmKtxc2NeP9QFiUZmEn2M+p+OPD02/nnl4FDnkWn/vbUPAVQLUF
GN3dhG0tIPWuZxzisDixHC9dF8SUgf2ONg30E4vYs0pnUIydZ294z8jT41kuSPVt
2kU5/q/y4rg+CMZG+10FW5bvj+I9+0BTEDcrQ5OuyPK8MgFzsN45TkIvLRoFq7AN
QfQhdtgriihqfcyWOsYrx3gr4MBX29PupOW3wIGU9Vwk58AwS3aBMDOzKYcifbkM
isWNBodW3HsMthwG2sffLPAfousEaVf+wfBlS6HnIEAdgmgqAo8JhVzyUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRVof0WgVWfEg4qtFvzkE4WDVm6MB8GA1UdIwQY
MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt
YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl
LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5SH6ZZl
Gvj+E+iCMqxhH7rpM97twubu7y7LFI3KlhxydHh2udKXXzRlSYkIczEgsevzSrzS
Cq2JHn1TTXnsvufgVJ0L3FUFVeiPtna5Niy2l/kk5O/VWnhVGc/FHQBrVo8PmnfP
PdndQRyMnQC/Kv9PGsMzbC5PrNfKK7X33MS1y+8jbnxfGQaUeMe0or/eybuGj276
SwTn7hqLtQt/VaLvEzq2NvL55F1N0hVcvwB2UhxsGub/upqnbKBUExVUQkMUdY0i
4xuQsHrFzFqeKHQs0REJgqO6SCIsrcZkaOg8ZV/KRqRaiF8f++RvgIeHSzZemhUJ
0iAwYs6++yHcIQ==
-----END CERTIFICATE-----
Generated at Thu Jul 2 05:13:32 2026 by rpki-client